$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa File: 41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa (raw, json) Hash identifier: 0eIXj3SBNxwxoqBIxGO4WUmMFXAPftxC++jH1dOBp6Y= Subject key identifier: A7:D4:11:36:02:AC:FF:13:96:1E:B3:AD:28:86:C7:EC:15:CF:E2:FF Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584DADAAE6FBC676B2B87DC17C80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 8069 IP address blocks: 20.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e6:fb:c6:76:b2:b8:7d:c1:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=cfb25ab5-226d-48e1-9db4-28582b3b34e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:c5:66:e2:84:8b:96:b5:22:1e:d5:67:77: 26:19:48:9a:ed:14:28:b5:6e:7b:d1:6f:73:d1:35: b5:7f:25:56:21:dc:1b:0c:89:6b:13:44:42:38:e1: 01:e1:c5:4f:ee:43:94:00:93:3d:6e:22:09:e0:b7: b3:bf:97:fb:5a:83:12:7f:3a:dd:39:5f:07:73:71: 5e:2c:37:ae:b2:52:65:7c:ed:3b:52:75:8f:2f:f4: e7:5c:d5:ec:bb:4f:f7:3d:61:1b:e0:1f:85:94:45: 63:97:16:ee:e3:35:58:f1:f5:fd:c8:05:c9:be:95: b9:a9:32:aa:c9:06:b2:ae:d8:1b:b1:89:26:45:8e: 7c:a5:43:25:46:b9:c3:a7:94:f8:e0:5e:8e:6d:2d: 7e:b0:a1:ab:78:50:dc:b9:a6:df:07:46:8d:a9:32: 46:b1:3f:88:db:27:7d:c8:9c:a8:83:8b:fc:ab:33: fa:5b:71:9c:0d:75:be:9c:9d:e7:05:28:ae:ab:2a: c5:15:f7:2b:04:33:26:4d:b5:02:7a:65:3d:a9:0c: 99:1b:0a:97:bc:2c:5e:88:9f:28:c0:6e:35:3f:d8: a8:a4:64:0d:5b:b0:6b:5d:2f:f3:83:0a:f9:0e:b8: 45:31:34:3c:a5:f7:53:02:cb:93:12:25:e8:2c:7e: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:11:36:02:AC:FF:13:96:1E:B3:AD:28:86:C7:EC:15:CF:E2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:98:3e:6e:9f:f3:3d:4c:97:4e:ab:f9:a4:21:58:39:26:9b: 79:8a:03:04:1b:98:13:e1:79:4f:70:f4:9a:e5:ff:70:26:f0: d0:16:38:9b:d8:7f:be:29:6c:b3:62:3f:d5:67:59:24:b5:a0: 2b:7b:68:3c:e5:1d:73:db:6e:11:bb:1f:d1:66:80:6e:5a:34: 71:02:45:2e:e2:f3:30:2e:51:2b:ce:3b:3b:65:72:65:d7:ce: a7:ee:ba:79:7f:d0:9c:5e:2c:51:0a:e6:21:2b:39:b3:0a:c6: 85:95:88:43:9c:81:d4:01:15:69:84:4f:d0:ad:92:95:33:76: a8:c8:8e:85:4b:88:dd:41:67:44:3e:5a:5b:11:c2:2a:5d:c7: 43:44:32:7b:a2:78:ad:df:fe:9d:a3:f9:73:1a:78:b5:ad:a9: e6:df:10:46:2f:79:77:01:5a:27:f4:4e:b3:27:52:db:4a:e3: 7c:4d:63:a7:6d:0a:7c:32:c3:92:6b:92:ac:cd:fd:d5:46:01: a2:d6:a1:56:30:7c:1c:90:1c:f5:80:56:9c:7e:4d:60:7d:3c: cc:c8:d3:5a:fe:4a:c3:04:d9:fe:d2:8f:8f:03:95:ee:ae:a0: 92:25:3c:cf:9a:42:d0:87:0d:dd:25:dc:15:d6:90:87:df:86: e7:cb:be:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqub7xnayuH3BfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk Y2ZiMjVhYjUtMjI2ZC00OGUxLTlkYjQtMjg1ODJiM2IzNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp3FZuKEi5a1Ih7VZ3cmGUia7RQotW570W9z 0TW1fyVWIdwbDIlrE0RCOOEB4cVP7kOUAJM9biIJ4Lezv5f7WoMSfzrdOV8Hc3Fe LDeuslJlfO07UnWPL/TnXNXsu0/3PWEb4B+FlEVjlxbu4zVY8fX9yAXJvpW5qTKq yQayrtgbsYkmRY58pUMlRrnDp5T44F6ObS1+sKGreFDcuabfB0aNqTJGsT+I2yd9 yJyog4v8qzP6W3GcDXW+nJ3nBSiuqyrFFfcrBDMmTbUCemU9qQyZGwqXvCxeiJ8o wG41P9iopGQNW7BrXS/zgwr5DrhFMTQ8pfdTAsuTEiXoLH6nQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfUETYCrP8Tlh6zrSiGx+wVz+L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDFkNzU5MjMtNGZlZC0z NTI5LTljNWYtYzVlOWZmNDBkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2YPm6f8z1Ml06r+aQhWDkmm3mKAwQbmBPheU9w9Jrl/3Am8NAWOJvY f74pbLNiP9VnWSS1oCt7aDzlHXPbbhG7H9FmgG5aNHECRS7i8zAuUSvOOztlcmXX zqfuunl/0JxeLFEK5iErObMKxoWViEOcgdQBFWmET9CtkpUzdqjIjoVLiN1BZ0Q+ WlsRwipdx0NEMnuieK3f/p2j+XMaeLWtqebfEEYveXcBWif0TrMnUttK43xNY6dt Cnwyw5JrkqzN/dVGAaLWoVYwfByQHPWAVpx+TWB9PMzI01r+SsME2f7Sj48Dle6u oJIlPM+aQtCHDd0l3BXWkIffhufLvjI= -----END CERTIFICATE-----Generated at Wed May 13 11:05:08 2026 by rpki-client